Skip to content

Commit 1c79fd5

Browse files
Potential fix for pull request finding 'CodeQL / Clear-text logging of sensitive information'
remove logging of actual SECRETS_DIR location Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 054fb31 commit 1c79fd5

1 file changed

Lines changed: 4 additions & 6 deletions

File tree

app/config/settings.py

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -315,15 +315,13 @@ def check_secrets_dir() -> list[str]:
315315
secrets_path = Path(secrets_dir)
316316
if not secrets_path.is_dir():
317317
warnings.append(
318-
f"SECRETS_DIR '{secrets_dir}' does not exist or is "
319-
f"not a directory. File-based secrets will not be "
320-
f"loaded."
318+
"SECRETS_DIR is set but does not exist or is not a "
319+
"directory. File-based secrets will not be loaded."
321320
)
322321
elif os.access(secrets_path, os.W_OK):
323322
warnings.append(
324-
f"SECRETS_DIR '{secrets_dir}' is writable by the "
325-
f"current process. For best security, this "
326-
f"directory should be read-only."
323+
"SECRETS_DIR is writable by the current process. "
324+
"For best security, this directory should be read-only."
327325
)
328326
return warnings
329327

0 commit comments

Comments
 (0)